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SUBJECT:  Audit  Report  on  Updating  the  Foreign  Disclosure  and  Technical  Information 
System  (Report  No.  98-157) 


We  are  providing  this  report  for  review  and  comment.  The  Army  did  not  respond 
to  the  draft  report;  however,  comments  from  the  Depu^  Under  Secretary  of  Defense  for 
PoUqr  Support,  the  Navy,  and  the  Air  Force  were  considered  in  preparing  the  final  report. 
The  complete  text  of  the  comments  is  in  Part  m. 

DoD  Directive  7650.3  requires  that  all  recommendations  be  resolved  promptly. 
Although  comments  were  received  from  the  Under  Secretary  of  Defense  for  Policy 
Support,  those  comments  did  not  address  the  recoinmendations  of  the  report.  We  request 
that  the  Deputy  Under  Secretary  of  Defense  for  Policy  Support  and  the  Army  provide 
conunents  by  August  17,  1998. 

We  appreciate  the  courtesies  extended  to  the  audit  staff.  Questions  on  the  audit 
should  be  directed  to  Evdyn  R.  Klemstine  at  (703)  604-9172  (DSN  664-9172) 
(eldemstine@dodig.osd.mil)  or  Ms.  Mary  E.  Geiger  at  (703)  6M-9615  (DSN  6M-9615) 
(mgdger@dodig.osd.mil).  See  Appendix  F  for  the  report  distribution.  The  audit  team 
members  are  listed  inside  the  back  cover. 

David  K.  Steensnu 
Deputy  Assistant  Inspector  General 
for  Auditmg 
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Updating  die  Foreign  Disclosure  and  Technical 
Information  System 


Executive  Summary 


Introduction.  The  Secretaries  of  Defense  and  State  have  designated  the  Nationa]  Military 
Information  EMsclosure  Polity  Committee  as  the  central  interagencjr  authority  within  the 
Bcecutive  Branch  oftheU.S.  Gov«nment  responable  for  formulating,  promulgating, 
administering,  and  monitoring  the  National  Disclosure  Policy.  The  Security  Policy 
Automation  Networic  provides  organizations  the  ability  to  commuiucate  and  coordinate 
with  DoD  organizations  on  foreign  disclosure,  export  control,  and  international  arms 
control  and  cooperation  subjects.  The  Forrign  Disclosure  and  Tec^cal  Information 
System  (FORDTIS),  wWch  resides  on  the  Security  Poli^  Automation  Network,  assists 
the  U.S.  Government  in  meeting  its  national  security  objectives  by  providing  a  historical 
database.  DoD  Directive  5230. 1 1,  “Disclosure  of  Classified  Military  Infoimation  to 
Fordgn  Governments  and  International  Organizations,”  and  DoD  Instruction  5230. 18, 
“The  DoD  Foreign  Disclosure  and  Technic^  Information  Syrtem,”  require  DoD  personnel 
to  record  in  FORDTIS  releases  of  and  denials  of  classified  military  information. 

Audit  Objectives.  The  overall  audit  objective  was  to  determine  whether  technology 
transfer  policies  and  procedures  in  DoD  adequately  prevent  the  unauthorized  release  of 
United  States  technical  information.  The  specific  audit  objective  for  this  segment  was  to 
determine  whether  the  DoD  Components  entered  in  FORDTIS  disclosures  and  denials  of 
classified  military  ii^rmation.  We  also  reviewed  the  management  control  program  as  it 
relat^  to  the  audit  objective. 

A  future  segment  of  the  audit  will  determine  whether  technology  transfer  policies  and 
proc^ures  of  the  Kfilitary  Departments  are  adequate  to  prevmt  the  unauthorized  release 
of  technical  infipimation.  The  result  of  that  objective  will  be  discussed  in  a  later  report. 

Audit  Results.  The  MiUtaiy  Departments  did  not  enter  all  disclosures  and  denials  of 
classified  military  information  into  FORDTIS.  As  a  result,  the  FORDTIS  did  not  provide 
the  National  Military  Iniformation  Disclosure  Poliq^  Conunittee  and  rdl  FORDTIS  users  a 
complete  database  ror  making  poli^  dedsibns  cor^ming  future  releases  of  classified 
military  information  to  fordgn  countries.  For  details  of  the  audit  results,  see  Part  I.  See 
Appendix  A  for  details  on  the  managonent  control  program. 

Summary  of  Recommendations.  We  recommend  that  the  Under  Secretary  of  Defense 
for  Policy  and  the  Nfilitary  Draartments  assira  a  high  priority  to  ^e  oitry  of  disclosure 
dedstons  into  tire  clasrifiM  muitary  information  database  and  dedicate  the  necessary 
resources  to  meet  the  rqrorting  requirements  of  DoD  Directive  5230.1 1  and  I^D 
Instruction  5230. 18.  We  aJso  recommend  that  the  Under  Secretary  and  the  Militr^ 
Departments  monitor  actions  taken  by  subordinate  commands  to  ensure  that  classified 


military  information  reporting  requirements  are  met.  In  addition,  we  recommend  that  the 
Under  Secretary  report  the  incomplete  classified  military  information  database  as  a 
material  management  control  weakness. 

Management  Comments.  Although  the  Office  of  foe  Under  Secr^ary  of  Defense  for 
Policy  Support  concurred  with  the  report’s  finding,  its  comments  (fid  not  address  the 
report’s  recommendations.  The  Navy  and  the  Air  Force  concurred  with  the  report’s 
reconunendation  and  initiated  corrective  actions  to  include  quarterly  reporting 
requirements.  Die  Army  did  not  comment  on  the  draft  rc^rt.  A  (fiscussion  of 
management  comments  is  in  Part  I  and  foe  complete  text  is  in  Part  in. 

Audit  Response.  We  request  that  foe  Under  Secretary  of  Defense  for  Policy  Support  and 
foe  Army  provide  comments  to  the  final  report  by  Au^st  17, 1998. 
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Part  I  -  Audit  Results 


Audit  Background 


National  Disdoiure  Policy>l.  The  National  Disclosure  Policy-1,  “National  Policy 
and  Procedures  for  the  Disclosure  of  Classified  Military  Information  to  Fordgn 
Governments  and  Intemationd  Organizations,”  October  1,  1988,  sets  specific 
criteria  and  conditions  that  must  be  inet  before  a  decision  is  made  to  release 
classified  military  iriformation  to  fisreign  govenunents  and  intentional 
organizations.  The  policy  states  that  all  departments  and  a^endes  responsible  for 
implementing  the  Nationd  Disclosure  Policy  will  report  thw  disclosure  actions  to 
the  National  Military  Information  Disclosure  Policy  Committee  (the  Disclosure 
Committee).  The  National  Disclosure  Policy-1  wm  issued  by  the  then  Secretary  of 
Defense  with  the  concurrence  of  the  then  Seo'etaries  of  Energy  and  State  and  the 
Director  of  the  Central  InteUigence  Agency. 

Disdosure  Committee.  The  Secretaries  of  Defense  and  State  have  designated  the 
Disclosure  Committee  as  the  central  interagency  authority  within  the  Executive 
Branch  of  theU.S.  Govemmrat  responsible  for  formulating,  promulgating, 
administering,  and  monitoring  the  National  Disclosure  Policy.  The  Disclosure 
Committee  is  composed  of  general  and  special  members.  General  members 
include  representatives  from  the  Offices  of  the  Secretaries  of  Defense,  State, 

Amqr,  Navy,  and  Air  Force  and  fi'om  the  Office  of  the  Chdrman,  Joirit  Chiefs  of 
Staff.  General  members  have  a  broad  interest  in  all  committee  operations.  Spedal 
members  are  those  who  have  a  signfficant  interest  in  some,  but  not  all  aspects  of 
committee  opmtions.  Spedal  members  include  representatives  of  the  Central 
Intelligrace  Agency,  the  Defense  Intelligence  Agency,  and  the  Department  of 
Energy. 

Security  Policy  Automation  Network.  The  Security  Poli^  Automation 
Network  (SPA^  provides  DoD  and  non-DoD  organizations  the  ability  to 
commumcate  and  coordinate  with  DoD  organizations  on  foreign  disclosure,  e^ort 
control,  and  international  arms  control  and  cooperation  subjects.  SPAN  consists 
of  DoD-wide  communications  classified  as  SECRET  and  separately  supported 
unclassified  communications.  The  classified  network  supports  about 
650  microcomputer  workstations  at  over  120  ormuiizations  located  throughout  the 
Office  of  the  Secretary  of  Defimse,  the  Joint  Staff,  the  Military  Departments, 
Defense  agencies,  and  selected  organizations  extemd  to  DoD.  The  unclassified 
network  supports  about  160  sites  at  fordgn  embassies  in  Washington,  DC;  defense 
industry;  and  U.S.  embassies  overseas.  SPAN  is  managed  by  the  Office  of  the 
Deputy  Under  Secretary  of  Defense  for  Poliqr  Support,  Policy  Automation 
Directorate.  In  FY 1997,  about  $1.6  million  was  expended  to  opiate  SPAN. 
SPAN  provides  connectivity  to  five  operational  systems:  the  Fordgn  Disclosure 
and  Technical  Information  System  (FORDTIS),  the  Foreign  Visits  System,  the 
U.S.  Visits  System,  the  SPAN  Dedsion  Support  Sy^em,  ^  the  National 
Disclosure  Policy  System.  Appendix  B  includes  a  discussion  on  SPAN  Year  2000 
compliance. 
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Foreign  Disclosure  and  Technical  Information  System.  The  Military 
Departments  and  Defense  agencies  are  required  to  report  disclosure  decisions  in 
accordwce  with  the  procedures  published  for  FORDTIS.  FORDTIS  assists  the 
U.S.  Government  in  meeting  its  national  security  objectives  by  providing  a 
lustorical  database.  FORDTIS  consists  of  the  following  four  functional  databases. 


o  The  classified  information  datab^  contains  r^rds  of  actions  taken  on 
proposals  to  disclose  or  deny  classified  militaiy  infiarmation  to  foreign 
governments  and  intematiorial  organizations. 

o  The  National  Disclosure  Policy  Exceptions  database  contains  records  of 
actions  by  the  Disclosure  Comnuttee  concerning  approvals  and  denials  of  requests 
for  exertions  to  the  National  Disclosure  Poliqr. 

o  The  Munitions  License  database  contains  records  of  actions  t^en  by 

DoD  to  recommend  approval,  denial,  or  modification  of  license  applications  to 
export  items  or  technical  data  on  the  U.S.  Munitions  List. 

o  The  Commodity  Control  List  database  supports  the  review  of 
applications  for  exports  controlled  by  the  Export  Administration  Regulation. 

The  FORDTIS  provides  high-level  dedsionmakers  and  analysts  a  dedicated 
automated  ^tem  to  faefiitate  decisions  on  transfers  of  information,  munitions,  and 
technology  to  fordgn  governments  and  international  organizations. 


Audit  Objectives 

The  overall  audit  objective  was  to  determine  whether  technology  transfer  policies 
and  procedures  in  DoD  adequately  prevent  the  unauthorized  release  of  United 
States  technical  information.  The  qiedfic  audit  objective  for  this  report  was  to 
determine  whether  the  DoD  Components  entered  into  FORDTIS  disclosures  and 
denials  of  classified  military  informatioii.  We  also  reviewed  the  management 
control  program  as  it  related  to  the  audit  objective. 

A  future  segment  of  the  audit  will  determine  whether  the  hfilitary  Departments’ 
technology  transfer  policies  and  procedures  are  adequate  to  prevent  the 
unauthonred  rdease  of  technical  information.  The  result  of  that  objective  will  be 
discussed  in  a  later  report.  See  ^ipendix  A  fi>r  a  discusdon  of  the  scope  and 
methodology,  our  review  of  the  manr^einent  control  program,  and  a  summary  of 
prior  coverage  related  to  the  audit  objective. 


*  A  list  of  articles,  services,  and  rdated  technical  date  designated  as  defense  articles  and 
defense  services. 
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Classified  Military  Information  Database 

The  Military  Departments  did  not  enter  all  disclosures  and  denials  of 
classified  military  information  into  FORDTIS.  I^e  condition  occurred 
b^use  the  Military  Departments  had  not  complied  with  DoD 
Directive  5230. 1 1  and  DoD  Instruction  5230. 18  hecsease  of  insufficient 
management  attention.  As  a  result,  the  FORDTIS  did  not  provide  the 
IXsclosure  Committee  and  all  FORDTIS  users  a  conmlete  databa^  fisr 
making  policy  decisions  concerning  future  releases  of  classified  military 
i^ormation  to  foreign  countries. 


Policy  Requirements 

DoD  Directive  5230.11.  DoD  Directive  5230. 1 1,  “Disclosure  of  Clawifi^ 
Nfilitary  Information  to  Foreign  Governments  and  International  Organ^tions,” 
June  16, 1992,  establishes  the  responsibilities  and  procures  for  the  disclosure  of 
classified  information  to  foreign  governments.  The  Directive  defines  which 
government  officials  are  responsible  for  determining  releasability,  the  assurances 
that  must  be  met  before  release  can  occur,  and  r^orting  requirements  for  the 
releasing  agency.  The  Directive  also  states  that  it  is  the  responsibility  of 
DoD  Components  to  ensure  that  their  disclosure  decisions  are  Entered  into  the 
FORDTIS. 

DoD  Instruction  5230.18.  DoD  Instruction  5230.18,  “The  DoD  Forei^ 
Disclosure  and  Technical  Information  System,’’  November  6,  1984,  provides 
policy,  procedures,  and  responsibilities  for  the  implementation  of  FORDTIS.  The 
Instruction  states  that  FORDTIS  is  to  provide  DoD  with  an  automted  system  to 
assist  decisionmakers  and  analysts  in  coordinating  reaching  decisions,  and 
reviewing  proposals  to  release  classified  military  i^omnatjon  (classified 
information)  and  technology  to  other  luitions  and  international  organi^tions. 
Classified  information  is  defined  as  U.S.  defense  information  or  noaterial  that 
requires  protection  against  unauthorized  disdosure  in  the  interests  of  national 
security  and  is  linuted  to  three  security  clasrificatioiis:  TOP  SECRET,  SECRET, 
and  CONFIDENTIAL  and  can  be  subdiwded  into  eight  categories 
(see  Appendix  C).  The  Instruction  defines  a  classified  information  cax  as  a 
request  received  fi-om  a  fordgn  government  or  international  organization  or 
proposed  by  a  DoD  Component.  The  cases  are  active  in  the  FORDTIS  treking 
and  assignment  ^stem  until  completed,  when  th^  are  closed  and  entered  in  the 
dassified  information  lustorical  database.  The  Instruction  requires  the  DoD 
Component  that  makes  the  disclosure  decision  to  enter  cases  with  the  following 
types  of  clastified  information  into  FORDTIS: 

o  dastified  information,  documoitation  and  material  that  is  disclosed 
pursuant  to  a  foreign  military  sde,  a  loan,  or  grant  of  equiprtrent; 

o  classified  information  disclosed  or  denied  pursuant  to  a  request  fi-om  a 
fordgn  government  or  international  organization; 
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o  classified  infoimation  disclosed  pursuant  to  a  U.S.  request  and 
agnificant  denials  ofU.S.  requests;  and 

o  significant  disclosures  and  denials.  Significant  disclosures  are  defined  as 
those  containing  TOP  SECRET  information,  involving  a  first  of  its  l^d  disclosure, 
establishing  precedent,  deri>dng  firom  an  exception  to  the  National  Disclosure 
Policy,  or  rraresenting  a  noteworthy  disclosure  decision  in  the  judgment  of  the 
reporting  official. 

DoD  Manual  5230.18-M.  DoD  Manual  5230. 18-M,  “The  Foreign  Disclosure 
and  Technical  Infonnation  System  User  Manual,”  July  1985,  assigns 
responsibilities  and  prescribes  procedures  for  entemg  data,  accessmg  data  ba^s, 
and  obtaining  reports  from  FORDTIS.  Classified  infonnation  is  reported  to  the 
database  by  creation  of  a  new  case  on  an  interactive  terminal  or  by  submssion  of  a 
DD  Form  1822,  “Report  of  Disclosures  or  Denial  of  U.S.  Classified  ^litary 
Information.”  Organizations  having  disclosure  authority,  but  not  having  access  to 
an  interactive  terminal  use  this  form. 


Reporting  Disclosures  and  Denials 

The  Military  D«)artments  did  not  enter  all  disclosures  and  denials  of  classified 
information  into  FORDTIS.  The  Office  of  the  Deputy  Under  Secretary  of  Defense 
for  Policy  Support,  Policy  Automation  Directorate,  provided  an  activity  report 
showing  the  number  of  active  or  closed  classified  information  cases  that  DoD 
organizations  reported.  The  following  table  summarizes  the  DoD  Components  by 
calendar  year. 

I  Classified  Infonnation  Cases  Reported  I 


Percent  Change 


DoD  Comnonent’ 

1995 

1996 

1997^ 

1995  to  1997 

Army 

498 

431 

292 

(41) 

Navy 

1.032 

859 

333 

(68) 

Air  Force 

211 

219 

180 

(15) 

Defense  Intelligence  Agency 

635 

589 

705 

11 

Other 

— i 

—A 

(50) 

Total 

2^78 

2,099 

1,511 

'  A  breakdown  by  DoD  Component  nftheiqioiteddassified  infonnation  cases 

is  in  Appradix  D. 

*  Rqiorted  cases  for  1997  are  not  final.  As  of  December  30, 1997,  not  all 
activities  had  entoed  all  1997  cases. 


The  activity  report  listing  indicated  that  decisions  reportable  on  requests  for  the 
disclosure  of  classified  information  by  the  Militaiy  Departments  decreased  from 
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1 995  through  1997.  The  largest  decreases  were  for  the  Army  and  the  Navy. 
Reported  Army  dedsions  on  the  requests  for  clasniied  information  decreased  by 
41  percent  and  the  decisions  report^  by  Navy  decreased  by  68  percent.  The  Air 
Force  decreased  15  percent  and  the  Defense  Intelligence  Agency  increa^ 

1 1  percent  over  the  3-year  period.  The  decreases  indicated  by  me  activity  report 
alone  is  not  evidence  of  a  problem. 

Questionnaires.  Foreign  disclosure  personnel  in  the  Nfilita^  Departments  were 
not  inputting  all  disclosures  and  denials  of  requests  for  classified  iitformation  into 
the  FORDTIS.  The  classified  information  requests  entered  into  ^e  FORDTIS  by 
the  Military  Departments  included  requests  related  to  foreign  military  stdes  as  well 
as  intelligence  data.  Tlie  jurisdiction  over  which  a  command  has  authority 
determines  the  type  of  classified  information  entered  by  that  command.  We  sent 
questionnaires  to  foreign  disclosure  personnd  identifi^  by  the 
Nfilitary  Departments  to  determine  whether  those  individuals  provided  input  to 
FORDTIS.  As  of  February  6, 1998,  a  total  of 229  que^ionnaires  were  retired  by 
the  Army,  Navy,  and  Air  Force.  Of  the  229  questionnaires  returned  by  Military 
Department  persoimel,  126  of  the  respondents  indicated  that  they  had  fordgn 
disclosure  responsibilities.  Of  the  126  foreign  disclosure  personnel  that  completed 
questionnaires,  only  70  (56  po’cent)  indicated  they  provid^  input  into  FORDTIS. 
However,  we  were  unable  to  determine  whether  foose  foreign  disclosure  personnel 
answering  the  questionnaire  had  a  requiremoit  to  input  into  FORDTIS.  u  a 
fordgn  m^losure  officer  did  not  have  the  authority  to  release  classified 
information,  there  was  no  reason  to  provide  input  into  FORDTIS.  We,  therefore, 
visit^  dght  sites  and  found  that  only  two  sites  reported  entering  the  required 
information  into  FORDTIS. 

Army.  The  Army  failed  to  enter  all  requests  for  classified  information  into 
the  FORDTIS.  We  visited  the  U.S.  Army  Aviation  and  Missile  Command  and 
contacted  the  U.S.  Army  Training  and  Doctrine  Command.  Personnel  at  the  U.S. 
Army  Aviation  and  Misrile  Command  stated  that  classified  infonnation  releases 
and  denials  were  entered  into  the  FORDTIS.  Howevw,  they  indicated  that 
entering  the  cases  into  FORDTIS  after  the  disclosure  decirions  were  made  was 
time-consuming  and  as  a  result  the  entering  of  cases  was  not  up  to  date.  Personnel 
at  the  U.S.  Army  Training  and  Doctrine  Conunand  stated  tl^  requests  for 
disclosures  and  decisions  on  requests  for  classified  information  were  not  enter^ 
into  the  database  because  of  a  lack  of  personnel  resources.  The  office  responsible 
for  decirions  on  requests  for  classified  infonnation  had  been  reduced  fi’om  12 
individuals  to  2,  and  updating  the  FORDTIS  was  only  one  of  many  duties 
performed. 

Navy.  The  Navy  failed  to  oiter  all  decirions  on  the  requests  for  classified 
information  into  the  FORDTIS.  We  visited  the  Naval  Air  Systems  Command,  the 
Navy  Intematiomd  Programs  Office,  and  the  Naval  Sea  Systems  Command. 
Personnd  at  the  Naval  Air  Systems  Command  stated  that  there  were  about  12 
releases  of  clawed  information  per  month.  Also,  although  they  were  aware  of 
the  reporting  reqiurement,  thi^  ^d  not  enter  decirions  on  the  request  for  the 
release  of  classified  information  into  the  database  because  of  a  lack  of  personnel 
resources.  The  Naval  Sea  Systems  Command  stated  tlmt  it  forwarded  decisions  on 
requests  for  classified  information  to  the  Navy  International  Programs  Office  for 
entry  into  the  FORDTIS.  However,  personnel  at  the  Navy  International  Programs 
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Office  did  not  agree  that  th^  should  be  inputting  Naval  Sea  Systems  Gotland 
releases  into  the  datid)ase.  Rather,  personnel  stoted  that  they  wtered  decisions 
only  on  reouests  for  wddch  they  rendered  a  decision,  not  decisions  made  by  the 
other  nav J  conunands. 

Air  Force.  The  Air  Force  failed  to  enter  all  decisions  on  the  requests  for 
classified  information  into  the  FORDTIS.  We  visited  the  Aeronautical  Systems 
Center  and  the  Electronic  Systems  Center  detachment  at  the  Boeing  Company.  At 
the  Aeronautical  Systems  Center,  personnel  stated  that  classified  information  cases 
were  initiated  the  Air  Force  Disclosure  Office,  Deputy  Under  Secretary  of  the 

Air  Force  (Intonational  Afbirs)  for  input  into  the  FORDTIS.  Requests  that 
originated  at  the  Aeronautical  Systems  Center  level  were  not  Mitered  into  the 
diitaKase  Force  Disclosure  Office  personnel  stated  that  th^  had  not  entered 
any  informadon  into  the  FORDTIS  for  the  AM-onautical  Systems  C^ter. 

Personnel  at  the  Electronic  Systems  Center  detachment  at  the  Bodng  Company 
were  not  recording  decisions  on  the  requests  for  classified  information  in  the 
database.  That  office  completed  21  releases  of  classified  information  relating  to 
the  sale  of  the  Airborne  Warning  and  Control  System  to  Japan  from  January  1995 
through  July  1997  without^tering  those  decisions  into  FORDTIS. 

Defense  Intelligence  Agency.  The  Defense  Intelligence  Agency  was  entering 
decisions  on  requests  for  classified  information.  Personnel  stated  that  cases  were 
entered  into  the  FORDTIS  for  historical  purposes  and  as  a  ^stem  for  tracking 
classified  requests.  In  addition,  the  classified  information  database  was  used  as  a 
reference  tool  for  expediting  ttw  dedsion  process  on  requests  for  classified 
information  by  foreign  countries.  Disclosures  and  denials  were  strictly  for 
intelligence  documents.  The  Defense  Intdligence  Agency  does  not  enter  any 
document  above  SECRET  into  the  dat^ase.  All  TOP  SECRET  releases  are 
manually  tracked.  Personnel  were  dedicated  by  the  Defense  Intelligence  Agency 
for  the  inputting  of  releases  and  denials. 


Reporting  Requirements 


The  NClitary  Departments  had  not  complied  with  DoD  Directive  5230. 1 1  and  DoD 
Instruction  5230. 1 8  because  of  insufficient  management  attention,  ^^sits  to 
various  organizations  disclosed  that  even  thou^  the  organization  taiew  of  the 
requirement  to  enter  classified  information  into  the  FORDTIS  classified 
information  database,  the  information  was  not  Mitered.  When  creating  a  case 
within  the  FORDTIS  classified  information  database,  the  entering  official  is 
requir^  to  entM*  spedfic  information  into  the  system  (see  Appendix  E). 

Additional  case  information  can  be  entered,  but  is  not  required  when  creating  a 
5»asf»  The  orgaruzations  indicated  that  updating  the  FORDTIS  was  one  of  many 
duti^  that  were  to  be  performed.  U.S.  Army  Aviation  and  Missile  Command 
fordgn  disclosure  persoimd  stated  that  each  disclosure  and  deiual  took  from  15  to 
20  n^tes  to  enter  into  FORDTIS.  We  recognize  that  the  amount  of  time  will 
vary  bas^  on  the  amount  of  information  to  be  (H'oeessed.  However,  as  a  result  of 
reduced  staffing  levels  at  U.S.  Army  Aviation  and  Missile  Command  and  other 
organizations,  the  entry  of  releases  of  and  denials  of  clasdfied  information  was 
given  a  low  priority.  Further,  persoimel  in  the  Office  of  the  Deputy  Under 
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Secretary  of  Defense  for  Policy  Support  stated  that  when  FORDTIS  was 
established  the  Military  Departments  were  given  personnel  to  perforin  the  data 
entry  required.  However,  because  of  personnel  reductions  those  positions  were 
eliminated  or  redesignated  by  the  Military  Departments. 

The  Deputy  Under  Secretary  of  Defense  for  Policy  Support  recoded  that 
decisions  on  requests  for  classified  information  were  not  entered  mto  FORDTIS. 
Li  a  December  6,  1996,  memorandum  addressed  to  the  Nfilitary  Departments,  the 
Joint  Staff,  and  the  Defense  Intelligence  Agency,  the  Deputy  Under  Swretary  of 
Defense  for  Policy  Support  stated  that  the  foreign  disclosure  program  is  of  vital 
importance  in  protecting  classified  information  and  in  providing  an  efficient  system 
to  share  classified  information  with  fiiends  and  allies.  The  memorandum  also 
reiterated  that  DoD  Directive  5230. 1 1  requires  all  DoD  officials  with  disclosure 
authority  to  record  their  disclosure  decitions  in  FORDTIS.  That  niemorMdum 
further  expluned  that  the  objectives  of  the  tystem  cari  be  met  only  if  all  disclosure 
officials  comply  with  reporting  requirements.  The  Military  EXepartments  still  did 
not  comply. 


Users  of  the  Database 

The  FORDTIS  did  not  provide  the  Disclosure  Committee  and  all  FORDTIS  users 
a  complete  database  for  middng  policy  decisions  concerning  future  releases  of 
classifi^  information  to  foreign  countries. 

Disclosure  Committee.  One  of  the  prim^  functions  of  the  Disclosure 
Committee  is  to  monitor  and  oversee  the  implementation  of  the  National 
Disclosure  Policy.  The  National  Disclosure  Policy  establishes  a  fi-amework  for  the 
approval  or  denial  of  classified  information  to  foreign  governments.  Further,  the 
National  Disclosure  Policy  defines  the  maximum  level  of  information  that  can  be 
released.  The  principal  means  that  the  Disclosure  Committee  has  to  monitor  and 
oversee  the  implementation  of  the  National  Disclosure  Policy  is  the  FORDTIS. 
However,  the  incomplete  database  severely  limited  the  committee  in  perfomung  its 
oversight  function.  TTie  reporting  of  disclosure  actions  also  insists  the  Disclosure 
Committee  in  making  its  annual  report  to  the  National  Security  Council  on,  ainong 
other  things,  an  assessment  of  the  effectiveness  of  the  Nationu  Disclosure  Policy. 

Other  Users.  One  of  the  primary  functions  of  the  FORDTIS  classified 
information  database  is  to  aid  fordign  disclosure  officers  in  disclosure  decisions. 
For  example,  a  foreign  disclosure  officer  can  use  the  FORDTIS  as  a  reference  tool 
for  a  requested  release  of  classified  information  from  a  country.^  Country  X  may 
request  classified  information  on  radar  tystem  Z.  The  foreign  disclosure  officer 
queries  the  FORDTIS  to  determine  whether  country  X  made  any  previous  requests 
concerning  that  radar  ^stem.  ff  the  results  of  the  query  indicate  mat  a  request  was 
previously  made  and  d^ed,  the  dassified  information  case,  maintained  in  the 
historical  ctotabase,  would  also  show  the  reasons  for  thin  denial.  The  foreign 
disclosure  officer  can  also  query  the  database  to  determine  whether  disclosures 
involving  the  requested  information  on  radar  tystem  Z  had  ever  been  made  to  any 
country  and  \riiether  such  requests  were  denied  or  granted.  Consequently,  the 
fordgn  disclosure  officer  considers  the  reasoning  for  the  release  or  denial  of 
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requested  information  when  the  current  request  is  considered;  and  in  some  cases, 
such  consideration  can  mcpedite  a  disclosure  decision  on  the  current  query. 
However,  because  the  FOKDTIS  contains  incompl^e  information,  users  of  the 
system  caimot  receive  the  benefits  of  the  system  as  intended. 


Summary 

The  FORDTiS  classified  information  database  was  not  used  to  its  &l]  potential. 

By  falling  to  enter  disclosures  and  d^als  of  requests  for  classified  infonnation  into 
FORDTIS,  decisiomnakers  did  not  have  the  requir^  infoimation  to  assist  in 
making  decisions  on  proposals  to  release  classified  information  and  technology. 
Past  diKlosures  were  the  precedent  governing  future  disclosures  and  d^sions.  In 
addition,  the  database  was  one  of  the  only  means  the  Di^losure  Committee  had  to 
monitor  the  effectiveness  of  the  Natioiud  Disclosure  Policy.  If  FOI®TIS  is  to 
satisfy  its  purposes,  then  the  rq)Oiting  requirements  of  DoD  Directive  5230. 1 1  and 
DoD  Instruction  5230.18  must  be  met.  Reporting  requirements  will  not  be  met 
unless  sufficient  management  attention  is  provided  to  ensure  database  input.  If  in> 
house  resources  is  the  limiting  factor,  the  use  of  contractor  resources  should  be 
considered. 


Management  Comments  on  the  Finding  and  Audit  Response 


Department  of  the  Air  Force  Comments.  The  Air  Force  ronciped  that  all 
Service  decisions  on  the  request  and  rdease  of  classified  military  information  were 
not  documented  in  FORDTIS.  The  Air  Force  nonconcurred  that  noncompliance 
with  DoD  Directive  5230.1 1  and  DoD  Instruction  5230.18  was  because  of 
insufficient  nuinagement  attention.  The  Air  For^  stated  that  the  Cluef,  Discjosure 
Division,  was  responsible  for  prioritizing  the  division’s  assi^ed  responsibilities 
and  that  a  higher  priority  had  been  assigned  to  rdease  dedsions  required  to 
support  operation^  requirements  than  administrative  functions  such  as  FORDTIS 
reporting. 

Audit  Response.  While  we  amee  that  FORDTIS  reportmg  was  largely  an 
administrative  ffinction,  by  failing  to  assign  a  higher  priority  with  the  reporting 
requirements  of  DoD  Ins^ction  5230. 18,  the  Force  has  indicted  that 

compliance  does  not  require  management  attention.  DoD  Instruction  5230.18 
states  that  the  purpose  of  FORDTIS  was  to  provide  the  DoD  with  aii  automated 
tystem  to  assist  decision  makers  and  analysts  in  reviewing,  coordinating  and 
reaching  decirions  on  proposals  to  rdease  classified  information.  As  such,  when 
receiving  requests  forwarded  fi'om  fordgn  disclosure  officers  the  Office  of  the 
Under  Secretary  of  the  Air  Force  (biternatiorud  Affairs)  can  use  the 
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historical  files  of  FORDTIS  to  reach  dedsions  on  those  requests  for  classified 
information.  Failure  to  input  release  decisions  into  FORDTIS  results  in  not 
including  those  decisions  m  the  historical  files  on  which  future  decisions  could  be 
based. 


Recommendations,  Management  Comments,  and  Audit 
Response 

1.  We  recommend  that  the  Under  Secretary  of  Defense  for  Policy;  the 
Deputy  Chief  of  Staff  for  Intelligence,  U.S.  Army;  the  Director,  Navy 
International  Programs  Oflke;  and  the  Deputy  Under  Secretary  of  the  Air 
Force  (International  Affairs): 

a.  Assign  a  high  priority  to  the  entry  of  disclosure  decisions  into  the 
classified  military  information  database  and  dedicate  the  necessary  in-house 
or  contractor  resources  to  meet  the  reporting  requirements  of  DoD 
Directive  5230.11,  ^Disclosure  of  Classifini  MUitary  Information  to  Foreign 
Governments  and  International  Organizations,**  and  DoD 

Instruction  5230.18,  **The  DoD  Foreign  Disclosure  and  Technical 
Information  System.** 

b.  Monitor  actions  taken  by  subordinate  commands  to  ensure  that 
the  classified  military  information  reporting  requirements  are  being  met. 

Under  Secretary  of  Defense  for  Policy  Support  Comments.  The  Deputy  Under 
Secretary  of  Defense  for  Policy  Support  concurred  with  the  finding.  The  Deputy 
Under  Secret^  stated  that  over  the  years  a  number  of  reinforement  notices  were 
sent  to  the  Kfilitaiy  Departments  rermnding  them  of  their  reporting  requirements. 
T^  Deputy  Under  Secretary  requested  the  Office  of  the  Inspector  General  make 
the  reporting  of  disclosure  iq>provals  and  denials  in  the  FORDTIS  system  an  item 
for  review  in  fiiture  audits  and  inspections. 

Army  Comments.  The  Army  did  not  comment  on  a  draft  of  this  report. 

Navy  Comments.  The  Navy  concurred  with  the  recommendation,  and  stated  that 
the  Navy  International  Programs  Office  will  remind  those  Navy  activities  and 
individuals  holding  disclosure  authority  of  the  requirement  to  input  disclosiue 
decisions  into  the  database.  The  Navy  further  stated  that  the  Navy  International 
Programs  Office  will  obtain,  on  a  quarteriy  basis,  a  report  from  the  DoD 
FORDTIS  office  and  conduct  follow-up  action  as  necessary. 

Air  Force  Comments.  The  Air  Force  concurred  with  the  recommendation,  and 
stated  that  they  were  working  with  the  software  developers  to  ensure  ^t 
meaningful  ciq>abilities  were  mcluded  in  the  software  update.  In  addition,  the 
Air  Force  stated  that  interim  guidance  \m11  be  discussed  at  a  disclosure  conference 
scheduled  for  August  1998  and  the  new  software  will  be  fielded  by  the  fall 
of  1998.  The  Air  Force  also  plans  to  establish  a  quarterly  reporting  requirement 
after  the  new  software  is  fielded. 


10 


Qassified  Military  Information  Database 


Audit  Response.  The  Office  of  the  Inspector  General,  DoD,  does  not  do 
inspections  and  our  audits  are  issue  oriented  and  not  broad  bas^  reviews  at 
Defense  activities.  Except  for  an  issue  oriented  audit  such  as  this  one,  the  lack  of 
staff  precludes  review  of the  completeness  of  FORDTIS  at  DoD  Components 
during  other  audits.  We  note  that  the  Navy  and  Air  Force  are  s^ng  up  qumerly 
reporting  requirements  related  to  the  completeness  of  reporting  information  into 
FORDTIS.  The  Deputy  Under  Secretary  should  colder  establishing  a 
performance  measure  on  the  completeness  of  repotting  information  into  the 
FORDTIS  system  and  having  the  Military  Departments  report  quarterly  on  the 
performance  measure. 

We  request  that  the  Under  Secretary  of  Defense  for  Poliw  wd  the  Deputy  Chief 
of  Stan  U.S.  Army  provide  comments  on  this  recommendation  in  response  to  the 
final  report. 

2.  We  recommend  that  the  Under  Secretary  of  Defense  for  Policy  report  the 
incomplete  classifled  military  information  database  as  a  material 
management  contr<d  weakness  until  reporting  requirements  are  met. 

Under  Secretary  of  Defense  for  Policy  Support  Comments.  The  Office  of  the 
Under  Secretary  of  Defense  for  Policy  did  not  address  this  recommendation  in 
response  to  the  draft  report.  We  request  that  the  Deputy  Under  Secretary  of 
Defense  for  Policy  provide  comments  on  this  recommendation  in  response  to  the 
final  report. 
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Appendix  A.  Audit  Process 


Scope  and  Methodology 

We  reviewed  DoD  policies  and  procedures  related  to  the  SPAN,  the  clashed 
information  database,  and  technology  transfer.  We  reviewed  the  classified 
information  activity  report  for  calendar  years  1995  throu^  1997  to  aid  in 
determining  whether  the  Military  Departmoits  were  entering  information  on 
decisions  to  release  or  deny  requests  for  classified  infonnation,  as  required.  The 
report  was  prepared  as  of  December  30,  1997.  We  mailed  questionnaires  to 
foreign  disclosure  officers  in  the  hfilitary  Departments  to  d^ermine  Aether  th^r 
had  access  to  FORDTIS  and  whether  they  were  providing  input  to  FORDTIS.  In 
Edition,  we  evaluated  the  Nfilitary  Departments’  procedures  to  input  d^isions  on 
requests  for  classified  infonnation.  We  also  reviewed  Year  2000  compliance 
issues  for  the  SPAN,  as  discussed  in  Appendix  B. 

We  visited  or  contacted  eight  sites  to  determine  whether  they  had  data  that  should 
have  been  entered  but  had  not  been  entered.  We  interviewed  personnel  within  the 
Office  of  the  Deputy  Under  Secretary  of  Defense  for  Policy  Support,  the  Defen^ 
Intdligence  Agency,  the  Army  Aviation  and  Missile  Command,  the  Army  Security 
Ai»istance  Command,  the  Army  Training  and  Doctrine  Command,  the  Naval  Air 
Systems  Command,  the  Naval  Sea  Systems  Command,  the  Navy  Litemational 
Programs  Office,  the  Office  of  the  Deputy  Under  Secretary  of  the  Air  Force 
(fotemational  Affairs),  the  Aeronautical  System  Center,  the  Electronic  Systems 
Center  and  its  detachment,  and  the  F- 16  System  Program  Office. 

Use  of  Computer-Processed  Data.  We  relied  on  FORDTIS,  maintained  by  the 
Office  of  the  Deputy  Under  Secretary  of  Defense  for  Policy  Support,  Poli^ 
Automation  IMrectorate.  Our  review  of  the  FORDTIS  classifiw  information 
database  did  not  cast  doubt  on  the  reliability  of  information  contained  within  the 
^stem.  However,  during  the  audit,  we  discovered  problems  concerning  the  entry 
of  ^ta  into  the  system  that  cast  doubt  on  the  completeness  of  the  data  contained 
within  FORDTIS.  Those  problems  arc  discussed  in  the  body  of  the  report.  We 
Mieve  that  the  opinions,  conclusions,  and  recommendations  in  this  report  are  valid 
and  vrill  help  correct  the  problem  with  the  completeness  of  the  data  contained  in 
the  system. 

Audit  Type,  Dates,  and  Standards.  We  performed  this  program  results  audit 
fi’om  May  1997  through  F^ruary  1998,  in  acMrdance  with  auditing  standards  that 
the  Comptroller  G^eral  of  the  United  States  issued,  as  implemented  by  the 
Inspector  General,  DoD.  Accordingly,  we  included  tests  of  maruigement  controls 
considered  necessary. 

Contacts  During  the  Audit.  We  visited  or  contacted  iiulividuals  and 
organizations  within  the  DoD.  Further  details  are  available  upon  request. 
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Management  Control  Program 

DoD  Directive  5010.38,  “Management  Control  Program,*  August  26, 1996, 
requires  DoD  organuations  to  implement  a  comprehensive  ^stem  of 
managemmt  controls  tiiat  provide  reasonable  assurance  that  programs  are 
operating  as  intoided  and  to  evaluate  the  adequacy  of  controls. 

Scope  of  Review  of  Management  Controls.  We  reviewed  the  adequacy  of  the 
DoD  and  Military  Dqxutmmts*  management  ctmtrols  to  ensure  tiiat  all 
dedsicms  on  the  requests  for  dassified  information  were  entered  into  the 
FORDTIS.  Specifically,  we  evaluated  DoD  and  hMtary  Depaitmrat 
implementation  of  imlicies  and  procedures  for  the  inputting  of  decisions  on 
requests  for  classinra  information  from  foreign  countries  into  tiie  FORDTIS. 
We  reviewed  management’s  sdf-evaluations  ^iplicable  to  those  controls. 

Adequacy  of  Managonent  Controls.  We  idratified  material  managonent 
control  weaknesses  for  the  Military  Departments  as  defined  by 
DoD  Directive  5010.38.  Die  DoD  and  h^tary  Dqiaitmente*  management 
controls  were  not  in  place  to  ensure  that  disclosures  and  denials  of  requested 
defied  information  were  entered  into  FORDDS  as  required  by 
DoD  Directive  5230. 11  and  DoD  Instruction  5230.18.  All  recommradations  in 
this  rqiort,  if  implemented,  will  provide  adequate  controls  for  reporting 
disclosures  and  d^als  of  classified  information.  A  copy  of  the  rqxirt  will  be 
provided  to  the  senior  officials  responsible  for  managemrat  cemtrols  in  the 
Office  of  the  dietary  of  Defense  and  the  Military  Departments. 

Adequacy  of  Management’s  Self-Evaluation.  Officials  within  the  Office  of 
the  Secretaiy  of  Defense  and  the  Military  Department  did  not  identify  the 
reporting  or  disclosures  and  denials  of  classified  inforn^on  as  an  assessable 
unit  and,  tiierefore,  did  not  identify  or  report  the  matmial  management  control 
weakness  identified  by  the  audit.  Command  level  compliance  stmuld  be 
monitored  cm  a  continuing  basis  as  part  of  command  self-evaluations. 
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SPAN  Compliance 

The  Office  of  the  Deputy  Under  Secretary  of  Defense  for  Policy  Support,  Policy 
i^tomation  Directorate,  has  taken  action  to  address  2000  compUance 
problems  for  the  SPAN.  In  the  Year  2000,  autonuted  information  systems  that 
are  not  Year  2000  compliant  will  have  to  1»  arhusted  for  the  way  d^es  are 
recorded  and  computed.  For  the  past  several  decades,  qrstems  typically  used  two 
digits  to  represent  the  year,  such  as  “9T*  repre^nting  1997,  to  conserve  electronic 
data  storage  and  to  reduce  operating  costs.  With  the  two-digit  format,  however, 
the  Year  2000  is  indistinguimable  from  1900.  The  cdcul^on  of  dates  is  forther 
complicated  b^use  the  Year  2000  is  a  leap  year,  being  divisible  by  100  and  400, 
while  the  year  1900  is  not.  As  a  result  of  the  ambiguity,  system  and  application 
programs  that  use  dates  to  calculate,  compare,  or  sort  could  generate  incorrect 
results  when  working  with  the  years  after  1999. 

In  April  1997,  the  Assistant  Secretary  of  Defense  (Command,  Control, 
Communications,  and  Intelligence)  issued  the  “DoD  Year  20^  Management 
Plan.”  According  to  the  plan,  DoD  Components  are  responsible  for  renovating 
existing  ^sterns  to  fix  the  Year  2000  deficiency  by  Dec^ber  1998.  The  Policy 
Automation  Directorate  has  identified  which  SP^4  systems  are  Yeiur  2000  ^ 
noncompliant  and  prepared  assessments.  It  is  estimated  that  $2.3  milhon  will  be 
required  to  make  the  SPAN  Year  2000  compliant.  Compliance  should  be  achieved 
by  the  end  of  FY  1998. 
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Appendix  C.  Categories  of  Classified  Military 
Information 


Category  1  -  Oryanization.  Training,  and  Emplo^ent  of  Military  ForccS- 
Information  of  a  general  nature  pertaining  to  tactics,  techniques,  tactical  doctrine, 
and  intelligence  and  counterinteuigence  doctrine  and  techniques. 

Category  2  -  Military  Material  and  Munitions.  Information  on  specific  items  of 
equipment  already  in  production,  or  in  service,  and  the  information  necessary  for 
the  operation,  maintoiance,  and  training.  This  category  does  not  pertain  to 
equipment  that  is  in  research  and  development. 

Category  3  -  Applied  Research  and  Development  ^formation  and  Mateiiri. 
Liformation  related  to  design,  experimental  investigation  into  possible  military 
applications,  and  fundamental  theories;  the  Mtegory  includes  engine^g  data, 
operation^  requirements,  concepts,  and  military  characteristics  required  to  adopt 
the  item  for  production. 

f!atftgnry  4  -  Production  Information.  Information  related  to  designs, 
manufiicturing  techniques,  specifications,  and  such  related  information  necessary  to 
manufacture  material  and  munitions. 

Category  5  -  Combined  Military  Operations.  Plaming.  and  Readiness.  Information 
necessary  to  plan,  ensure  readiness  for,  and  provide  support  to  the  achievement  of 
mutual  force  development  goals  or  participation  in  specific  combined  tactical 
operations  and  zeroises.  The  category  does  not  include  strategic  plans  and 
guidance  or  North  American  defense  information. 

Category  6  -  US.  Order  of  Battle.  Inforrnation  pertaining  to  U.S.  Forces  in  a 
specific  area.  In  general,  disclosures  of  this  information  are  limited  to  those 
countries  in  which  U.S.  Forces  are  stationed  or  are  in  adjacent  geographical  areas. 

7-  North  American  Defense.  Information  related  to  plans,  operations, 
programs,  and  projects,  to  include  data  and  equipment,  directly  related  to 
North  American  defoise. 

(Tilltf  gO'Y  *  -  Militarv  Intdligence.  Information  of  a  military  character  {gaining  to 
foreign  nations.  The  category  of  information  does  not  include  natio^  intelligence 
or  sensitive  compartmentM  imormation  under  the  purview  of  the  Director  of 
Cent^  Intelligence. 
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Appendix  D.  Classifled  Military  Information 
Cases  Reported  by  Organization 


Army 

Foreign  Disclosure  Office 
Army  Communications  Electronic  Command 
Army  Material  Command 
Army  M^rial  Systems  Analysis  Center 
AniQr  Missile  Command 
Army  Research  Lab 
Army  Security  Afbirs  Command 
Army  Training  and  Doctrine  Command 
Chemical  and  Biological  Defense  Command 
National  Ground  Intelligence  Center 
Strategic  and  Space  Defense  Command 
Army  Total 

Naw 

Foreign  Disclosure  Office 
Marine  Corps  Headquarters 
Naval  Air  Systems  Command 
Naval  Ejqilosive  Ordinance  Diqmsal 
Naval  Sea  Systems  Command 
Navy  International  Programs  Office 
Office  of  Naval  Intelligence 
Navy  Total 

Airforce 

Foreign  Disclosure  Office 
National  Air  Intelligence  Center 
Air  Force  Total 

Defense  Intelligence  Aeencv 
Foreign  Disclosure  Office 
Foreign  Visits  Office 

Defense  bstdligence  Agency  Total 

Other 


Total 


1995 

1996 

mi 

114 

140 

153 

1 

0 

0 

0 

10 

0 

26 

13 

0 

67 

76 

16 

126 

59 

43 

3 

1 

1 

1 

0 

0 

19 

0 

2 

131 

131 

77 

10 

_ 1 

0 

498 

431 

292 

626 

505 

284 

0 

0 

1 

2 

0 

0 

307 

162 

0 

1 

1 

1 

0 

74 

0 

_ 26 

_U2 

47 

1,032 

859 

333 

96 

131 

68 

115 

88 

112 

211 

219 

180 

619 

549 

670 

16 

40 

35 

635 

589 

705 

_ 2 

_ 1 

1 

2,378 

2,099 

1,511 
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Appendix  E.  Sample  of  a  Classified  Military 
Information  Case  Form 

The  following  is  a  sample  of  a  DD  Form  1822,  used  to  input  classified  information 
cases  into  the  FORDllS. 


CASC  ZS  tCNIC*  ZM  MHOLC  OR 

PAftT«  THCN  THCftC  MUST  tC  A  RCASON  HCIIC  CtPLAXMXHC  MMV  TMC  OCNZAL  HAS  flA» 

Amy  s^cczAL  RcnARics  shoulo  sc  cmrcRCt  mHZcm  mZLt  iiacc  rmc  casc  unocrsta 
AOLC  TO  soncomc  UmFAflZLZAR  mXTH  THC  OOCUnCNT  OK  PRO£IIAn«  or  ztz  RCLATZONS 
p  mzTH  othcr  rrocrars.  the  zkrorratzon  ncrc  ZS  VERY  zrrortant  zm  Asszsri 

OTHER  ACTZVZTZCS  THAT  RAY  OC  RAKZNO  OZSCcOSURC  OECZSZONS  THAT  ARC  RCLaTC 


^TTTWTF  VM » Vi  ^  W<  LhO  CUf  \  •  f  4  Pi 

. 

_  ‘ _  r«EKsi 


i/’>rgyT>m  n 


ntnonr  of  oiscLosunc  on  denial  of  us  classifieo  miutahy  iNFomsATiON 


iwr^nmin  —■■■■■■■■■a 

rATT-^-T  m’-nr-rTTTv?  ■  ■  mi  i  iTTmrj.r.wq.— — —  |  a  1,1  iMnifTirtr 

rn.ii?nT/r:^j;mizrrmi^wn:iH-aj.ifi:iBi»iMlMS1l11«IWflMSWI11i 

^F^Fan^-Tr-T^-Ti^inf-icaaimcara— i;>oY.xgn 

11111:131 


acoLoc-atiiMv.oi'. 
Sti 


tea 
iQSBionim 


IIBII 


iSC  OCSCRZ^TlOm  here.  XT  ZS  HOT  RE  CCS 
RY  TO  OURCZCATC  OTHER  zSifORRATZON  ZR  THE  CASE\  NOHEVCR'i  YOU  CAN  ZRCLUfE  H 
THE  RCRUCSr  NAS  RCCEZVCO  ARO  THE  RURROSt  FOR  THE  RCRUEST  AL0N6  RZTH  NHAT 
AS  RCCR  RCRUCSTCO^  NOTZCE  HOH  THE  NORA  NREARS  ARE  RAOE  ZR  THIS  CXAnPLE* 
CnentER^  to  NOT  AAJIIST  THE  fORrt  ORCC  YON  NCCZR  TYRZNtf.  _ 


ROCCOZRCS  or  the  FZRST  ARRUAL  flECTZMC  ON  THC  US 
1  r*v 


THZS  tOCunENT  RAY  »C  AZSTRZtUTCA  NZTHOUT  RESTRICT. 


2RJTCS  OF  THC  STCCRIRC  COnnZTTCE  JURE  02- 


THZS  OOCUnCNT  CONTAINS  POLICY  RCCOnRCRAATIONS  MHZ 
HAVE  NOT  OCCN  APPROVCO-  NO  F0RC16R  RELEASE  ZS  PERRZTTEO. 


Appendix  E.  Sample  of  a  Classified  Military  Infonnatlon  Case  Fonn 


The  preceding  form  contains  all  information  that  can  be  entered  on  die 
DD  Form  1822.  The  following  items  are  required  to  be  wttrcd  into  FORDTIS 
as  part  of  a  classified  information  case. 

o  Item  1  •  a  ono-line  summary  of  the  case. 

o  Item  2  -  the  dassificatirm  of  the  case. 

o  Item  4  >  the  date  of  case  closure. 

o  Item  5  -  die  requesting  country. 

o  Item  6  -  the  release  decision. 

o  Item  8  -  the  Natirmal  Disclosure  Policy  Category  Code. 

o  Item  10  -  whetho'  the  disclosure  is  significant  or  not. 

o  Items  12  and  13  •  the  processing  agency  and  office. 

o  Item  14  -  whether  any  decompartmented  intelligence  informaticm  is 
contained  in  the  case. 

o  Item  18  •  a  description  of  the  case  (no  more  than  five  lines), 
o  Item  20  •  keywords. 

o  Item  21  -  remarks  (only  if  case  was  a  denial). 

o  Item  22  -  a  line  item  oitry  describing  each  item  or  document  covered 
by  die  case. 
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Appendix  F.  Report  Distribution 


Ofiice  of  the  Secretary  of  Defense 

Under  Secretary  of  Defisnse  for  Acqui^on  and  Technology 

Deputy  Under  Secretary  of  Defense  (Intmational  and  Commercial  Programs) 
Director,  Defense  Logistics  Studies  Mormation  Exchange 
Under  Secretary  of  Defense  Comptroller) 

Deputy  Chief  Financial  Officer 
Deputy  Comptroller  (Program/Budget) 

Under  Secretary  of  Defense  for  Policy 

Deputy  Under  Secretary  of  Defense  for  Policy  Support 
Assistant  Secretary  of  Defense  (^blic  Affairs) 


Department  of  the  Army 

Assistant  Secretary  of  the  Army  (Financial  Management  and  Comptroller) 
Deputy  Chief  of  Staff  for  Intellieence 
Auditor  General,  Department  of  the  Army 


Department  of  the  Navy 

Assistant  Secretary  of  the  Navy  (Financial  Management  and  Comptroller) 
Director,  Navy  International  Programs  Office 
Auditor  General,  Department  of  the  Navy 


Department  of  the  Air  Force 

Assistant  Secretary  of  the  Air  Force  (Financial  Management  and  Comptroller) 
Deputy  Under  Secretary  of  the  Air  Force  (International  Affairs) 

Auditor  General,  Department  of  the  Air  Force 


Other  Defense  Organizations 

Director,  D^ense  Contri^  Audit  Agency 
Director,  Defense  Logistics  Agency 
Director,  Defense  Information  Systems  Agency 
Director,  National  Security  Agency 

^pector  General,  Natiotul  Security  Agency 
Director,  Defense  Security  Assistance  Agency 
In^>ector  General,  Defense  Intelligence  Agency 
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Appendix  F.  Report  Dbtribution 


Non-Defense  Federal  Organizations  and  Individuals 

Office  of  Management  and  Budget 
General  Accounting  Office 

National  Security  and  International  Affiurs  Division 
Technical  Information  Center 
Inspector  General,  Department  of  State 

Chairman  and  ranking  minority  member  of  each  of  the  following  congressional  committees 
and  subcommittees; 

Senate  Committee  on  Appropriations  ,  , 

Senate  Subcomnuttee  on  Defense,  Committee  on  ^propnations 
Senate  Committee  on  Anned  Services 
Senate  Select  Conunittee  on  Intelligence 

House  Committee  on  Appropriations  .  . 

House  Subcommittee  on  National  Security,  Committee  on  Appropriations 
House  Committee  on  Government  Reform  and  Overaght 
House  Subcommittee  on  Government  Management,  Information,  and  Technology, 
Committee  on  Government  Reform  and  Oversight  .  «  .  .  i  t 

House  Subcommittee  on  National  Security,  International  affairs,  and  Criminal  Justice, 
Committee  on  Government  Reform  and  Oversight 
House  Committee  on  National  Security 
House  Permanent  Select  Committee  on  Intelligence 
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Part  ni  -  Management  Comments 


Office  of  the  Under  Secretary  of  Defense  (Policy 
Support)  Conunents 


OFPiOC  OP  THE  UNDER  SCCftErAKV  or  DEFENSE 
aoeo  MPCNK  KMTAOON 

«A»«««rroN,oe  aoMt-Moo 


18  lily  1998 

MEMORANDUM  FOR  DIRECTS.  RBAIHNBSS  AND  LOCKSTICS  SUFKAT 
MRECTORATE.  (WFICE  OF  THE  DOD  INSPECT(» 
<%NERAL 

SUBIBCT:  Audit  RepoO  on  UpdidDf  ite  IkireigB  Discfowre  tad  Tedaual 
btformalioa  SyiKin  (Pn^Nd. 

RafticBee;  Yaur  mamonndun.  dtM  18  Miidi  1998.  subject  u  above 


We  i|ipnciitt  ds  onuntuid^  to  oooaneat  tti  sri^  daft  aud^ 
oooccndiiE  Ike  FQiei|B  DisckMUR  sad  Ikduiksl  bfOntedoB  Systen  (FORDTIS). 
AttMbed  is  toe  Policy  mpeoie  to  the  dttft  npoit. 


f'UtocoWdbD 
DcfO^  Itader  Secietaiy  of  Defense 
(FoUcy  SuppM) 


AtttdHMOt 
As  stated 


ODUSD(PS)  ItcQoate 
Ift 

l)oDIGBa(Bagi«BJItoc<wmmditi^ 

Pta^No.  7L04040 

linto.  CQOCWirilhtlielSadii«lMaeDoDCoii|)OiKi«iiic^ 

•&  dbctome  dedriou  into  te  Faniii  DbeloRR  aid  Tiebifcal  bfoonite  Syiiem 

(POROUS). 

-  11ieF(Ma>TIS^iieniide<tMdioiMei4tndeciiiOHtoaffCO«eoraav 

tKlfhtUrrt  ift  |IHIienillllM«l  md  tlUMimiliail 

nrpniMKoM  DoO  IMncth*  S230.ll.  "Diidoiae  of  daiiilled  mtuy  tatamtita 
to  Foitl|0  Oovtxnracnb  fui  ftywhaiioM  *  ditod  16  Jsw  1992  md 

OoObitnKiioo  5230.11,  niK  D«D  Fo(ti|B  Obdom  lod  Tedninl  bSara^ 
SyMm  ()K»011S).*  dttd  6  Nbvtate  1984  die  itponioK  oTaO  aiv^^ 
•iidteUtofclaidfkdadlittiyiafeaMtlaittRiicifBeiidtiet.  Hi*  Dtedlve  nd 
Ae  bttinictkD  crede  Ae  pckiriQr  needed  for  te  fwocdbii  (/dbclouR  de^^ 
POROUS.  Coo^ianMkeife^  since  te  died  OoDitwueei  ire  dbKiive  in 
naiiiR.  Over  the  yem.  i  nuribcr  rf  eridbiccnifBi  norinei  hive  ftnwded  to 

Ae  Sefvicet  reninding  Aea  of  Aeir  i^ottiog  wyniWiiiei. 

>  SevenItiaieiAAenceD(pitt,ddioa!cehiiwtfeited,iono»viil,  Alt 
d»  DoD  lupecior  Geaend  nnk  Ae  I<Ht011S  9i(en  in  Rea  ibr  eofweniie  Aoiai 
noditi  end  inipecikM  of  OoD  ConynMiitt.  WA  downsizing  of  boA  penoonel  tnd 

bidgett,  ore  ibillv  19  idnforee  Ae  in^odiitte  tf  i9C(t>i«  61ic)o^ 

I<HU>T1S  tyiAffl  becooKt  OMR  dUllcuh  adea  we  use  iD  ivtUiUe  itiett  A  DoD. 

Ri*««— 4»da».  RficoauneadAreAereeoidii^ofdiicloiURiiipnw^ 
dcaiik  fa  Ik  FOROnS  lyirea  be  in  ina  Ar  iDdmion  A  ftnree  OoD  10  ladhi  red 
taipectioni.  HibihouldbedonefcriieitpefiodofOeoyeinfaonkftoieli 
proper  evihttticB  of  tfab  rerntnmfrvlukio. 
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Department  of  the  Navy  Comments 


mrnmorvmMKfi 

trimmmmmwamm 

ummmmtitmteamim 

IMMVTKHMIM 


aOMlV 


MSMomiraaN  ran  m  vuunnoBa  or  DEra»s  msxsxmit  xmskctor 
cDoaua  roR  mozvik 

SDBJBCT:  OODZ6  Onft  Report:  Dpditllig  Tbo  Foxolpa 
Oiseloottxo  Rad  toehaieol  ZOfoaHtioa  Syatw 
(Roport  Ro.  7I1G-OO4O)  >  lafeiaotloa  Minrondup 

RRI1R0CC:  (•)  OOOZO  Roport  710*0040  ot  10  Mardl  2RR1 

Mo  bovo  roviowod  roforoneo  (a)  aad  eeneor  vlth  tbo 
ftodlnoo  oad  xobb— loiittloao.  Mo  boot  iaploaontod 
MoaogMiont  eoattelo  to  oorroet  tbo  oituotloo  by  inotructing 
Movy  zro  to  rMolbd  tboM  Booy  aetivitioa  aad  iadlviduala 
boldiag  OlseloBoro  authority  of  tbo  roqulxwont  to  iapot 
dlaeloauto  doeiaiooa  into  tbo  databaft.  Maay  no  will 
obtaia  a  Mport  frea  tbo  000  fOROns  Offioo  on  all  CNZ  data 
ontorod  on  a  guartoxly  baais.  Vaoy  ISO  will  ooaAiet  follow¬ 
up  action  with  tbo  field  aetivitioa  aa  aoeoaaary  baaed  on 
that  c^rt. 


a;v0LjJLt-- 

WJIXZRM  J.  fCRaXRR 
Ooputy  baaiataat  Soexatary 
of  tbo  Hawy 

rianning,  trogr taw  logy  aad 

Roaoncooe 


Copy  to: 

IMO  (31) 
NbVZMSGa  (02) 
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SOMZCTi  00DI6  Draft  Mpozt:  Opdatisg  Tha  Itoralgn 
Dltcleaura  Dad  Taehnieal  ZaCocaation  Systaa 
(Daport  No.  7L6-0040)  •  Xafotaatlon  Maaorandua 

tllad  Copy  ia: 

OONmvxXMYSCaH,  Vatuxant  Slaar  MD 
CONMAVSEASySCOH,  dashlsgton.  DC 
OOtfSywnuysCOM,  fan  Oiage,  CA 
NAVICP,  fhiladalpbia,  m 
COMHKVGODnCHDlV,  Xadlan  liaad,  ND 
Navy  ZtO«  Naahiagton,  DC 


Department  of  the  Air  Force  Comments 
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2 


Air  Fofoe  lUqiMoaef 
to 

TOD  IG  ReooamietidtdoiM 

Project  No.  7LO-0040 


BbAbKi  AkFotceooocin  with  die  fiiidtot  that  all  Service  deciiloni  oil  die  requests  for 
claiaifled  tufonnatioD  «e  not  documented  in  the  Focdgn  IKadoeuie  end  Technical  Ihfonnetion 
Syftem(]<MUniS)ClatslfiedMIUtaryManiiitioii(CMI)dalibiae.  While  die  ledc  of  reporting 
niay  have  hnpected  the  Netiooel  Difcloenfe  Folky  Q«iiiiittee*a  abihty  to  nioiutor  and 

ovmee  die  ^kOMiitatioQ  of  the  Natknel  Diadoeiiie  Policy  (NI^»  Air  Rm 
negative  in^iact  oo  dedaioo  makiiig  aoributed  to  die  other  PDRDTIS  uaen  U  oversteted  for  three 

teaaons. 

a.  Fiiat,  Air  Force  polky.oooiiitent  with  DoD  Directive  5230.11,  if  to  document 
daasifiedmleaae  authority  In  a  d^atkxic^diackMHifeMithority  letter  (DDL).  Air  Force 
diKloeure  officera  that  do  not  poiacsithia  documented  telcaae  authority  are  not  permitted  to 
approve  claaaifiedieleaaea  whether  a  precedent  exiata  in  the  CMI  database  or  not  Intfals 
aituadoo,  the  diaclome  officer  would  forward  die  sequeat  to  SARTAD  where  the  policy  decition 
would  be  made  baaed  on  our  bialorical  filet  and  Service  policies. 

b.  Second,  non-Air  Force  FORDtlSuaera  would  not  be  authorized  to  make  ideaaes  of 
Ak  Fdrce  classified  infocmatioo  baaed  on  CMI  caaea.  In  aocordance  with  the  NDP,  the 
reqiooiibility  fordecitiona  to  diacloae  classified  military  information  belongs  In  the  first  instance 
to  the  bewl  of  dw  department  or  agency  originating  the  information.  Non-Air  Force  agencies 
proposing  inlcaer  of  Air  Force  claadfied  information  must  obtain  specific  release  approval  from 
SAIVIAD. 


c.  Ihird,  we  beUeve  die  lechnicdltndtitioiia  of  die  PORDnSprcaeoted  a  challenge  m 
be  resolved  in  order  to  make  die  system  M  effective  as  possible  for  the  Air  Force.  Tbecunent 
soltwiiekheeedandieDOSoperilinisyftein.  Ueera  querying  the  database  fer  informet^ 
weK,lidtiaUy,lliidtedmexacdyiiieic^dauenteredintoqiecfficfields.  A  tmboquery 
gyabili^  has  been  added  which  permits  ^^rildcartT  ararrhea  of  data.  This  eenoept  means  that 
seMcbesforwords/piraeisiiidlarloasdiitgoriettBracanbeecc^  In  our  c^inioD, 
etdier  type  of  search  or  use  of  the  kqrwoid  as  a  seaidi  engine  will  be  successful  only  If  the 
creeuYttf  the  fite  mi  die  user  of  dw  database  are  funiliar  wife  die  same  words  or  concepts.  Any 
differences  at  all  will  not  result  in  a  nutdi,  even  feou^  a  pertinent  case  may  have  been  created 
fe  fee  database.  As  an  examide,  we  offer  the  probleins  feat  can  be  encountered  when  seanfeing 
for  ioforinntioa  on  the  iDternet 

Air  Force  oonouts  with  the  Teoommendatioo  10  assign  a  higher 
priority  to  the  entry  of  disdosuie  decisions  into  the  CMI  database.  Our  office  has  been  actively 
engaged  widi  fee  CMI  database  software  developed  to  have  the  capability  for  1  ineaningful 
mbject  indexing  adieiwindudedfedw  software  vpdme.  SAIVIAD  has  also  Inchided  die  use  of 
die  CMI  database  as  an  agenda  itsm  for  our  upooodng  dtscloeuit  conferenoe  scheduled  for  4-^ 
AttgPd.  We  Iwve  also  soUdtadpre-confeienoeiBpuUftom  disdosuie  offices  in  die  field  to  help 
determine  die  stnictuie  for  a  Bifeject  index.  SAWIAD  intends  to  discuu  interim  guidance  related 


to  ttie  CMI  teibiae  and  baivt  ibe  Ak  Fom  Mdy  10  bcfla  diUMliy  with  tlifi  fitldfaif  of  tN 
CMl  aoftwm  ta  the  ftS  of  19M. 

Ak  Font  DOO-ocncinthMaoa-OQiBpIiaDoe  with  DoDDinc^  nd 

DoDInaniCtion  5230,11  k  due  ID  laiMffirfiwtipaaatqp^  The  CSikf.  Ditclosiire 

Dividon  k  feqxxiilble  for  pflorhitiiii  the  dividoo*!  aesigBed  iei|)^ 
ForoofMralkmdieqiikBiM  HefluutifipQfid  to  cfmdoiid  feqttkemeok 

hi^MT  pikrity  bee  boM  eedlDid  to  iikiw  doddoM  foqiiked  to  eu|iport  ndi  iiiidetivM  dian  the 
priority  aadfoed  to  adminkindvft  fonedou  eudi  ii  te 

QnacoiiiliiiouebidStiiieCliicf.DiicloeufeD^^ 
the  meoMs  ofdie  dividoa  (»  to  ddUty  to  iooonpliab  both  ahoft  nd  kMig  tm  goak  «id 
objeodm,  toJuly  1906,helnittoedemUfDoieolofraeo«oeewiChtodiediicloei» 
feviewaDdifdatobiidiiBMfdeiedMpeoU^  die  Service  dkctoeuiepro^^  Thie  digninent 
hu  eiudtod  die  Ak  Fcxce  to  eetabiiib  e  forind  diicloeiiie  kdniog  progrni,  be^  updati^ 
varkaiepiooeiaeiaBdoiMioeidratooabiidiiesaidaiedfeqol^^  Having  accomplished  a 
poddve  Alto  step,  he  k  called  to  a  leociid  effort  to  fofiher  malign  the  leeouioes  engaged  in 
dieae  acdvitlet  widi  an  eedmatod  compktioa  dale  of  1  Sqp  98. 

lgr*Tiptnif1ffffTir-^  Aktanoonoandurasytaemadcplaatoiiiooltoroooiplianoewith 
fC|KXliiigf«{iiiienieokiriditodtoAkF^  Our  prapoaed  plan  is  to  estabUab  a 

quarterly  rqtort  mqukeiiiem  wto  dm  OfiSoe  of  dto  Under  Sacmtaiy  of  Defoiie  for  Policy 

Sttoport,MicyAutoBstfk«Dimctoiato,hegimin|dieiacoadCY  quarter  after  the  Aelding  of 
tttoitodatedaoftwe.todocuiitBnttfacugeoftoeOdldatibaaf  by  individual  Air  Force 
diadoenie  offloee. 
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